linux.git/net/ipv6, branch v2.6.22-rc4 Clone of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git [NET]: Fix comparisons of unsigned < 0. 2007-06-04T01:08:47+00:00 Bill Nottingham notting@redhat.com 2007-06-01T04:33:35+00:00 75202e76893c11ce7f8bcc9a07f994d71e3d5113 Recent gcc versions emit warnings when unsigned variables are compared < 0 or >= 0. Signed-off-by: Bill Nottingham <notting@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net> 
Recent gcc versions emit warnings when unsigned variables are
compared < 0 or >= 0.

Signed-off-by: Bill Nottingham <notting@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
[IPV6]: Fix build warning. 2007-05-31T08:23:31+00:00 David S. Miller davem@sunset.davemloft.net 2007-05-29T20:15:41+00:00 8c7fc03e27167425a1396320da43533462556b0c net/ipv6/ip6_fib.c: In function ‘fib6_add_rt2node’: net/ipv6/ip6_fib.c:661: warning: label ‘out’ defined but not used Signed-off-by: David S. Miller <davem@davemloft.net> 
net/ipv6/ip6_fib.c: In function ‘fib6_add_rt2node’:
net/ipv6/ip6_fib.c:661: warning: label ‘out’ defined but not used

Signed-off-by: David S. Miller <davem@davemloft.net>
[IPSEC]: Fix panic when using inter address familiy IPsec on loopback. 2007-05-31T08:23:28+00:00 Kazunori MIYAZAWA kazunori@miyazawa.org 2007-05-29T20:03:17+00:00 f282d45cb496e3960046afd3d5f241265eda6fde Signed-off-by: Kazunori MIYAZAWA <kazunori@miyazawa.org> Signed-off-by: David S. Miller <davem@davemloft.net> 
Signed-off-by: Kazunori MIYAZAWA <kazunori@miyazawa.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
[IPV6] ROUTE: No longer handle ::/0 specially. 2007-05-31T08:23:26+00:00 YOSHIFUJI Hideaki yoshfuji@linux-ipv6.org 2007-05-29T08:13:24+00:00 7ebba6d14f8d63cad583bf1cc0330b601d5a8171 We do not need to handle ::/0 routes specially any longer. This should fix BUG #8349. Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org> Acked-by: Yuji Sekiya <sekiya@wide.ad.jp> Signed-off-by: David S. Miller <davem@davemloft.net> 
We do not need to handle ::/0 routes specially any longer.
This should fix BUG #8349.

Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Acked-by: Yuji Sekiya <sekiya@wide.ad.jp>
Signed-off-by: David S. Miller <davem@davemloft.net>
[IPSEC]: Fix IPv6 AH calculation in outbound 2007-05-31T08:23:25+00:00 Kazunori MIYAZAWA miyazawa@linux-ipv6.org 2007-05-25T08:22:25+00:00 144466bdf8c479ae36678ace7a3b8e8b748df6f6 Signed-off-by: Kazunori MIYAZAWA <miyazawa@linux-ipv6.org> Signed-off-by: David S. Miller <davem@davemloft.net> 
Signed-off-by: Kazunori MIYAZAWA <miyazawa@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
[XFRM]: Allow packet drops during larval state resolution. 2007-05-25T01:17:54+00:00 David S. Miller davem@sunset.davemloft.net 2007-05-25T01:17:54+00:00 14e50e57aedb2a89cf79b77782879769794cab7b The current IPSEC rule resolution behavior we have does not work for a lot of people, even though technically it's an improvement from the -EAGAIN buisness we had before. Right now we'll block until the key manager resolves the route. That works for simple cases, but many folks would rather packets get silently dropped until the key manager resolves the IPSEC rules. We can't tell these folks to "set the socket non-blocking" because they don't have control over the non-block setting of things like the sockets used to resolve DNS deep inside of the resolver libraries in libc. With that in mind I coded up the patch below with some help from Herbert Xu which provides packet-drop behavior during larval state resolution, controllable via sysctl and off by default. This lays the framework to either: 1) Make this default at some point or... 2) Move this logic into xfrm{4,6}_policy.c and implement the ARP-like resolution queue we've all been dreaming of. The idea would be to queue packets to the policy, then once the larval state is resolved by the key manager we re-resolve the route and push the packets out. The packets would timeout if the rule didn't get resolved in a certain amount of time. Signed-off-by: David S. Miller <davem@davemloft.net> 
The current IPSEC rule resolution behavior we have does not work for a
lot of people, even though technically it's an improvement from the
-EAGAIN buisness we had before.

Right now we'll block until the key manager resolves the route.  That
works for simple cases, but many folks would rather packets get
silently dropped until the key manager resolves the IPSEC rules.

We can't tell these folks to "set the socket non-blocking" because
they don't have control over the non-block setting of things like the
sockets used to resolve DNS deep inside of the resolver libraries in
libc.

With that in mind I coded up the patch below with some help from
Herbert Xu which provides packet-drop behavior during larval state
resolution, controllable via sysctl and off by default.

This lays the framework to either:

1) Make this default at some point or...

2) Move this logic into xfrm{4,6}_policy.c and implement the
   ARP-like resolution queue we've all been dreaming of.
   The idea would be to queue packets to the policy, then
   once the larval state is resolved by the key manager we
   re-resolve the route and push the packets out.  The
   packets would timeout if the rule didn't get resolved
   in a certain amount of time.

Signed-off-by: David S. Miller <davem@davemloft.net>
[IPV6]: Ignore ipv6 events on non-IPV6 capable devices. 2007-05-24T23:36:44+00:00 Oliver Hartkopp socketcan@hartkopp.net 2007-05-23T21:35:31+00:00 bbb711e63332d7b43b535381c78b26a66cd60f48 Signed-off-by: Oliver Hartkopp <socketcan@hartkopp.net> Signed-off-by: Urs Thuermann <urs@isnogud.escape.de> Signed-off-by: David S. Miller <davem@davemloft.net> 
Signed-off-by: Oliver Hartkopp <socketcan@hartkopp.net>
Signed-off-by: Urs Thuermann <urs@isnogud.escape.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
[IPV6]: Reverse sense of promisc tests in ip6_mc_input 2007-05-14T10:00:27+00:00 Corey Mutter crm-netdev@mutternet.com 2007-05-14T10:00:27+00:00 ae7bf20a6316272acfcaef5d265b18aaa54b41e4 Reverse the sense of the promiscuous-mode tests in ip6_mc_input(). Signed-off-by: Corey Mutter <crm-netdev@mutternet.com> Signed-off-by: David L Stevens <dlstevens@us.ibm.com> Signed-off-by: David S. Miller <davem@davemloft.net> 
Reverse the sense of the promiscuous-mode tests in ip6_mc_input(). 

Signed-off-by: Corey Mutter <crm-netdev@mutternet.com>
Signed-off-by: David L Stevens <dlstevens@us.ibm.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
[NETFILTER]: Clean up table initialization 2007-05-11T06:47:43+00:00 Patrick McHardy kaber@trash.net 2007-05-10T21:14:16+00:00 3c2ad469c317147fc1de19579f8173ddb68a9e91 - move arp_tables initial table structure definitions to arp_tables.h similar to ip_tables and ip6_tables - use C99 initializers - use initializer macros where possible Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net> 
- move arp_tables initial table structure definitions to arp_tables.h
  similar to ip_tables and ip6_tables

- use C99 initializers

- use initializer macros where possible

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
[UDP]: Fix AF-specific references in AF-agnostic code. 2007-05-11T06:47:22+00:00 David S. Miller davem@sunset.davemloft.net 2007-05-09T23:42:20+00:00 fc038410b4b1643766f8033f4940bcdb1dace633 __udp_lib_port_inuse() cannot make direct references to inet_sk(sk)->rcv_saddr as that is ipv4 specific state and this code is used by ipv6 too. Use an operations vector to solve this, and this also paves the way for ipv6 support for non-wild saddr hashing in UDP. Signed-off-by: David S. Miller <davem@davemloft.net> 
__udp_lib_port_inuse() cannot make direct references to
inet_sk(sk)->rcv_saddr as that is ipv4 specific state and
this code is used by ipv6 too.

Use an operations vector to solve this, and this also paves
the way for ipv6 support for non-wild saddr hashing in UDP.

Signed-off-by: David S. Miller <davem@davemloft.net>